Who is it for?

  • Anyone who has some existing responsibility for data protection within their organisation.
  • It’s also useful for those who want to broaden their basic understanding in this area and fully understand the practical applications of data protection laws.
  • Whilst this certificate is written to the UK Data Protection Act, many other jurisdictions have enacted broadly similar data protection laws, so international candidates may also find this useful.

Entry requirements

  • It's ideal if you hold the BCS Foundation Certificate in Data Protection, though this is not mandatory.
  • We strongly recommended that candidates attend an accredited training course and are fully familiar with GDPR and the syllabus and any recommended reading outlined in the syllabus.

What will I learn?

Candidates will be able to:

  • Gain an understanding of the key changes and the associated implications that the GDPR and the UK Data Protection Act 2018 introduce to data protection.
  • Gain an understanding of individual and organisational responsibilities under the GDPR and the UK Data Protection Act, particularly the need for effective record keeping.
  • Be able to apply the new rights available to data subjects and understand the implications of those rights.
  • Be able to demonstrate an understanding of the designation, position and role / tasks of a data protection officer.
  • Be able to prepare organisations to manage and handle personal data in compliance with the GDPR and the UK Data Protection Act.

The syllabus includes training objectives, details of modules and learning hours, plus a recommended reading list:

Download our latest syllabus (PDF)

Please note: This certification is being refreshed in line with legislative updates in this space as of 30 April 2021. 

View the changes to the syllabus (PDF)

These changes will be implemented in exams sat with a training provider from 31 July 2021. Exams sat with Pearson Vue will be on the updated syllabus from 1 September 2021.

Any legislative changes between 1 May and 31 October 2021 will be reflected in the new version due to be released in January 2022.

How do I get this certification?

Training and exam (recommended)

Take this course with one of our accredited training providers.

How long will it take?

Classroom courses usually last between three and five days dependent on training provider.

Where can I study?

At a BCS accredited training provider near you.

How much does it cost?

Course prices vary depending on your chosen training provider and course format.

Find a provider

Exam only (self study)

Ideal if you’re self-motivated and already know something about data protection.

How long will it take?

It usually takes between 20 to 40 hours dependent on experience.

Where do I sit my exam?

At any Pearson VUE test centre across the world.

How much does it cost?

Guide price: £228 (£190 + VAT)

Book your exam

What format is the exam?

  • A 90 minute closed book digital 40 question multi-choice exam
  • Pass mark is 65%

Download the specimen paper (PDF)

This qualification is not regulated by the following United Kingdom Regulators - Ofqual, Qualifications Wales, CCEA Regulation or SQA.